Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/9-rq1FaeYdUASrwmK5HFj1Y1hDw.roa
File:                     9-rq1FaeYdUASrwmK5HFj1Y1hDw.roa (raw, json)
Hash identifier:          pWRarM2NeeS0Pg1MYuqV5/3C5E4AB60o4os3mx085h0=
Subject key identifier:   F7:EA:EA:D4:56:9E:61:D5:00:4A:BC:26:2B:91:C5:8F:56:35:84:3C
Certificate issuer:       /CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Certificate serial:       0BA29B82
Authority key identifier: 9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/9-rq1FaeYdUASrwmK5HFj1Y1hDw.roa
Signing time:             Sat 01 Jan 2022 05:00:39 +0000
ROA not before:           Sat 01 Jan 2022 05:00:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202864
IP address blocks:        46.16.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195206018 (0xba29b82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd989234f75ae04de30653ae14139f9dc609ac1
        Validity
            Not Before: Jan  1 05:00:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f7eaead4569e61d5004abc262b91c58f5635843c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:7b:a1:df:08:a9:e4:6f:0d:20:46:5d:2f:
                    93:85:a7:4b:74:11:4c:bf:51:dc:c0:da:3f:54:3a:
                    6b:ae:32:32:37:d4:a1:db:81:e1:67:16:55:53:19:
                    98:f5:87:f7:22:a8:62:8e:2b:3f:60:28:33:0f:80:
                    53:9e:6f:8b:ae:04:95:8b:4d:17:91:78:c2:c6:28:
                    31:0a:40:a6:c9:fb:1a:70:89:8e:d2:54:95:13:05:
                    01:81:e3:58:6c:cd:f7:20:2f:63:52:fe:ae:3a:ef:
                    61:5c:38:11:71:22:7d:7f:68:2a:36:76:d6:e9:ef:
                    51:9c:3b:c7:25:0d:b9:32:d7:f8:ba:09:7f:2a:7f:
                    57:2b:51:25:7c:aa:52:10:b7:a9:6c:2f:af:62:4b:
                    68:5e:12:cc:62:73:45:af:e6:43:62:a0:0f:3e:f1:
                    14:c4:6b:6b:72:b8:28:f4:0b:7d:25:f7:60:8a:dd:
                    16:e7:6a:2f:60:02:bd:2c:6f:24:22:da:35:e4:28:
                    7c:c3:48:67:db:69:b5:2b:a2:03:ba:cb:30:7b:ca:
                    0c:79:62:87:11:cc:4b:42:41:de:60:75:7c:43:9c:
                    3c:c4:ee:52:c0:92:b7:6c:0c:8a:c4:36:5b:6c:be:
                    08:a9:87:95:54:5e:79:07:df:fb:79:6a:aa:64:a7:
                    a2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EA:EA:D4:56:9E:61:D5:00:4A:BC:26:2B:91:C5:8F:56:35:84:3C
            X509v3 Authority Key Identifier:
                keyid:9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/9-rq1FaeYdUASrwmK5HFj1Y1hDw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/ndmJI091rgTeMGU64UE5-dxgmsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:22:67:a3:d0:2b:2f:f9:e5:39:56:93:16:0c:1c:82:67:
         2f:1b:71:b8:0d:1a:ea:2c:a9:37:e4:05:32:24:8f:5d:2e:6c:
         28:5b:47:22:71:ab:26:21:ae:b1:8a:22:60:62:dc:f9:c8:18:
         40:36:e5:3e:11:e8:64:cd:fe:5b:77:11:69:74:5c:a7:58:4e:
         98:84:33:b8:f4:b0:b5:8e:18:e7:b7:96:ef:24:0e:f5:c7:1b:
         be:bf:77:bd:f1:ca:04:1f:c9:f4:95:fa:5c:32:69:4d:f7:69:
         89:53:d5:1e:5d:5e:e4:40:61:a5:b9:04:b4:a0:18:5e:17:22:
         6a:59:60:5c:ff:68:32:07:c8:1a:7c:6a:1e:85:d5:17:e4:17:
         bc:64:87:aa:c9:f4:b4:93:73:33:84:94:0b:04:e4:ab:58:9a:
         77:c2:a1:f6:25:bc:d0:9a:65:68:2e:17:d7:3f:34:fd:af:59:
         81:e8:39:2f:9f:ab:a1:ca:79:5d:bd:d0:3e:82:72:ec:7e:b0:
         56:1e:4e:fa:88:8f:02:d0:a0:c6:79:1f:e8:f4:1f:18:f7:82:
         62:e1:50:cd:05:1c:5d:e8:7f:d5:59:5d:76:cb:53:12:dc:68:
         71:35:b1:3c:8e:d4:af:94:6f:f8:b1:cb:13:27:90:b2:44:f8:
         58:13:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:08 2024 by rpki-client on console-ams.rpki-client.org